entity api project entity api 7.x-1.1 vulnerabilities and exploits

(subscribe to this query)

4

CVSSv2

The Entity API module 7.x-1.x prior to 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticated users to read the comments via unspecified vectors. NOTE: this identifier was SPLIT per ADT5 due to different researcher organizations. ...

Entity Api Project Entity Api 7.x-1.0 Entity Api Project Entity Api 7.x-1.1

4

CVSSv2

The entity wrapper access API in the Entity API module 7.x-1.x prior to 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment, user and node statistics properties via unspecified vectors.

Entity Api Project Entity Api 7.x-1.2 Entity Api Project Entity Api 7.x-1.1 Entity Api Project Entity Api 7.x-1.0 Fedoraproject Fedora 20 Fedoraproject Fedora 19

4

CVSSv2

The entity wrapper access API in the Entity API module 7.x-1.x prior to 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspecified vectors.

Entity Api Project Entity Api 7.x-1.0 Entity Api Project Entity Api 7.x-1.1 Entity Api Project Entity Api 7.x-1.2 Fedoraproject Fedora 20 Fedoraproject Fedora 19

4

CVSSv2

The entity_access API in the Entity API module 7.x-1.x prior to 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspecified vectors.

Entity Api Project Entity Api 7.x-1.2 Entity Api Project Entity Api 7.x-1.0 Entity Api Project Entity Api 7.x-1.1 Fedoraproject Fedora 19 Fedoraproject Fedora 20

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook